Privacy policy

This policy explains what personal information The Great Bangladeshi Experience collects when you use this website, why we collect it, and the choices you have. It applies to travelers who create an account or make a booking with us.

Account details you give us: your name, email address, nationality, phone number, WhatsApp number, city and country of residence, a profile photo if you upload one, and your password (which is stored in a secured, hashed form by our authentication provider).

Trip and safety details: the experiences and dates you book, your guest count, any dietary needs or allergies you tell us, and an emergency contact name and phone number.

Payment details: payments are processed by Stripe. We receive a record that a payment succeeded and its amount, but we do not collect or store your full card number.

Communications and usage: messages you send us, the emails we send you, and basic technical information your browser provides when you visit.

We use your information to create and secure your account, to plan and arrange your trip, to set and process payment, to send booking and account emails, and to keep you safe during experiences (for example by knowing your dietary needs and emergency contact). We also use it to respond to your questions and to improve the service.

Where data protection law such as the GDPR applies to you, we rely on the following bases: performing our contract with you to arrange and deliver your booking, your consent for optional details, our legitimate interests in running and improving the service, and compliance with legal obligations. [Confirm the bases that apply to your customers with your lawyer.]

We share information only with the providers that help us run the service: our hosting and database provider (Supabase), our payment processor (Stripe), and the email service that sends your messages. We may disclose information where the law requires it. We do not sell your personal information.

Because we serve international visitors, your information may be processed on servers located outside your home country. We take reasonable steps to ensure it is handled securely wherever it is processed. [Confirm the storage region and any transfer safeguards with your lawyer.]

We keep your account and booking information for as long as your account is active and for a reasonable period afterward to meet legal, accounting, and record-keeping needs. You can ask us to delete your account, subject to any records we are required to keep.

Depending on where you live, you may have the right to access the information we hold about you, correct it, delete it, receive a copy, or object to certain uses. You can update most details yourself in your dashboard profile, or contact us to exercise any of these rights.

We protect your information with encryption in transit, access controls, and a database that enforces who can see and change each record. No system is perfectly secure, but we work to keep your information safe and to limit who can access it.

We use a small number of cookies that are necessary to keep you signed in and to keep the site working. We do not use them to track you across other websites. [If you later add analytics or marketing tools, describe them here.]

The service is intended for adults aged 18 and over and is not directed to children. We do not knowingly collect information from anyone under 18.

We may update this policy from time to time. The date at the top shows when it last changed, and significant changes will be reflected here.

For any privacy question, or to exercise your rights, contact The Great Bangladeshi Experience at support@bdexperience.net. [Add your registered business name and postal address here.]